•
the right to erasure (not if the data is being used in the exercise or defence of a legal claim);

•
the right to restrict processing;

•
the right to data portability;

•
the right to object; and

•
the right not to be subject to automated decision-making including profiling (automated credit decisions can still be made as they can be deemed necessary for entering into a contract between a finance company and the individual).